Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course in Johannesburg, South Africa
Classroom training in Johannesburg · next cohort Nov 2, 2026 · from USD 6,800
Clients, regulators and funders increasingly ask whether an organisation can prove it protects information, and a ransomware outage or data leak can end that conversation. Ten days walk security and IT professionals through building an information security management system that stands up to scrutiny. You define context, interested parties and scope, secure leadership commitment, write the information security policy, and run a structured risk assessment using asset registers, threat and vulnerability analysis, and treatment plans. From there you draft the Statement of Applicability and select controls from ISO/IEC 27001 Annex A, covering access management, cryptography, logging, supplier security, incident response, business continuity and secure development.
The later days go beyond paperwork to technical safeguards and assurance: network and endpoint hardening, vulnerability management, awareness programmes, metrics, internal audit, management review, nonconformity handling and preparation for a certification audit. CISOs, security officers, IT managers, risk and compliance staff, internal auditors and systems administrators in banks, telecoms, government and technology firms are the target group. Classroom, online and in-house delivery are offered, with a CPD-accredited certificate. You finish with an implementation roadmap and a core document set ready to adapt.
At a Glance
Training in Johannesburg, South Africa
Johannesburg is South Africa's economic heart, home to the JSE and the head offices of Africa's largest companies.
More about training in Johannesburg →- Format
- Classroom, in Johannesburg
- Duration
- Mon - Fri (10 Days)
- Fee
- USD 6,800
- Next start dates
- Nov 2, 2026, Nov 30, 2026, Dec 28, 2026
- Certificate
- Certificate of Completion
- Airport
- O.R. Tambo International (JNB)
- Time zone
- South Africa Standard Time (UTC+2)
- Currency
- South African rand (ZAR). Fees are listed in USD.
- Business districts
- Sandton, Rosebank and Midrand
About this course
Cyber incidents now rank among the most disruptive risks any organisation faces, and the pressure to demonstrate good practice comes from every side: customers in tender documents, regulators in data protection and sector rules, insurers and donors in due diligence questionnaires. ISO/IEC 27001 offers a recognised, auditable way to show that security is managed rather than improvised.
The Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course is a practical ten-day journey through the standard's requirements and the work needed to meet them. The first week covers the structure of the standard, scoping, leadership, policy, asset inventory, risk methodologies and the Statement of Applicability. The second week concentrates on implementing and testing controls, including technical measures, people and supplier security, incident management and continuity, followed by internal audit, management review and certification preparation.
Throughout, participants build the documents and records an auditor expects, using templates and a running case organisation. The course emphasises proportionate, risk-based decisions so that smaller institutions can adopt the same logic as large ones, and closes with a roadmap participants can take straight back to work.
Training Objectives
By the end of the programme, participants will be able to:
- Explain the clauses of ISO/IEC 27001 and how the management system cycle operates.
- Define context, scope and information security objectives for an organisation.
- Conduct an information security risk assessment and produce a risk treatment plan.
- Prepare a Statement of Applicability and select Annex A controls with justification.
- Implement technical and organisational controls for access, networks, endpoints and suppliers.
- Develop incident response and business continuity arrangements that are tested.
- Plan and perform an internal audit and report nonconformities and corrective actions.
- Prepare for external certification audits and sustain continual improvement.
What you'll learn
Key Takeaways
Participants complete the programme with:
- A scoped ISMS plan with objectives, roles and a phased timeline.
- An asset register and risk assessment worked on a case organisation.
- A draft Statement of Applicability with control justifications.
- Outline policies and procedures for access, incidents and supplier security.
- An internal audit programme and checklist.
- A certification readiness roadmap tailored to their own organisation.
Training Methodology
The programme is workshop-driven, using a single case organisation across the ten days, with:
- Expert explanation of each clause and control theme
- Template-based workshops to produce scope, risk and SoA documents
- Technical labs on access review, hardening and log analysis
- An incident simulation and a mock internal audit
- Peer review of each participant's roadmap
Day 1: Foundations of Information Security
- Confidentiality, integrity and availability explained
- The threat landscape and common attack paths
- Overview of the ISO/IEC 27000 family
- Structure and clauses of ISO/IEC 27001
- Benefits, costs and common pitfalls of certification
- Introduction to the case organisation
Day 2: Context, Leadership and Scope
- Understanding the organisation and interested parties
- Legal, regulatory and contractual requirements
- Defining ISMS scope and boundaries
- Leadership commitment and security governance
- Roles, responsibilities and resources
- Workshop: drafting the scope statement
Day 3: Security Policy and Asset Management
- Information security policy and objectives
- Asset identification, ownership and classification
- Acceptable use and handling rules
- Document control and records for the ISMS
- Awareness and competence requirements
- Workshop: building an asset register
Day 4: Risk Assessment
- Risk methodologies and criteria
- Threats, vulnerabilities and impact analysis
- Likelihood, risk levels and acceptance
- Risk owners and registers
- Linking risk to business objectives
- Lab: assessing risks for the case organisation
Day 5: Risk Treatment and the Statement of Applicability
- Treatment options: modify, retain, avoid, share
- Annex A control themes: organisational, people, physical and technological
- Writing the Statement of Applicability
- Risk treatment plans and residual risk
- Prioritising controls with limited budget
- Workshop: completing a Statement of Applicability
Day 6: Access, Cryptography and Operations Security
- Identity, authentication and privileged access
- Cryptography and key management basics
- Change, capacity and malware protection
- Backup, logging and monitoring
- Vulnerability and patch management
- Lab: reviewing access rights and log evidence
Day 7: Network, Cloud and Secure Development
- Network segmentation, firewalls and secure configuration
- Endpoint and mobile device protection
- Cloud service security and shared responsibility
- Secure development lifecycle and testing
- Penetration testing and vulnerability scanning in context
- Lab: hardening a sample environment
Day 8: People, Suppliers and Physical Security
- Recruitment, onboarding and exit controls
- Awareness, phishing and behaviour programmes
- Supplier risk and outsourcing agreements
- Physical and environmental security
- Remote working and bring-your-own-device
- Exercise: writing a supplier security clause set
Day 9: Incident Response and Business Continuity
- Incident detection, triage and escalation
- Forensics basics and evidence handling
- Business impact analysis and recovery objectives
- Continuity plans and testing
- Linking ISO 27001 with ISO 22301 and privacy rules
- Simulation: responding to a ransomware event
Day 10: Audit, Review and Certification Readiness
- Monitoring, metrics and performance evaluation
- Internal audit planning and techniques
- Management review inputs and outputs
- Nonconformities and corrective action
- Stage 1 and stage 2 certification audit expectations
- Final roadmap presentations
The programme is designed for professionals who plan, run or assess information security, including:
- Chief information security officers and security managers
- IT managers and heads of infrastructure
- Information security and risk officers
- Compliance, privacy and data protection officers
- Internal and IT auditors
- Network, systems and cloud administrators
- Project managers leading certification projects
- Consultants supporting ISMS implementation in banks, telecoms and public bodies
Participants who attend the programme and complete the workshops and labs receive a CPD-accredited Certificate of Completion issued by Vision Reach Global Consultancy.
The certificate evidences training completed and does not constitute ISO 27001 lead implementer or auditor certification.
Choose Where You Want to Learn
Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course Venues
South AfricaJohannesburgNext Nov 2· 13 dates$6,800Viewing- South AfricaPretoriaNext Nov 2· 13 dates$6,400
- South AfricaCape TownNext Oct 26· 13 dates$7,600
KenyaNairobiNext Nov 9· 13 dates$3,000- KenyaMombasaNext Oct 26· 13 dates$3,200
- KenyaNaivashaNext Nov 2· 13 dates$3,000
- KenyaKisumuNext Oct 26· 13 dates$3,000
- KenyaMachakosNext Nov 2· 13 dates$3,200
UgandaKampalaNext Nov 2· 13 dates$3,800
RwandaKigaliNext Oct 26· 13 dates$3,800
TanzaniaArushaNext Nov 9· 13 dates$3,800- TanzaniaDodomaNext Oct 26· 13 dates$3,600
- TanzaniaDar es SalaamNext Oct 26· 13 dates$4,000
- TanzaniaZanzibarNext Nov 16· 13 dates$5,200
NigeriaLagosNext Nov 16· 13 dates$5,600- NigeriaAbujaNext Nov 9· 13 dates$5,600
UAEDubaiNext Oct 26· 13 dates$7,600
GhanaAccraNext Nov 16· 13 dates$9,000
Scroll sideways to see all 18 cities →
Frequently Asked Questions About Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course in Johannesburg
Everything you need to know about this course before you register.
Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course runs as classroom training in Johannesburg, South Africa, in Monday-to-Friday cohorts that start every four weeks. The venue, daily timings and joining details are sent in your Joining Instructions email ahead of the start date.
The next Johannesburg cohort starts on November 2, 2026, and a new intake follows every four weeks. Pick a date under "Upcoming sessions in Johannesburg" above and click Register; your seat is confirmed once payment or a signed purchase order is received.
The classroom fee for Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course in Johannesburg is USD 6,800 per delegate, covering tuition and course materials. Register 3 or more delegates together and a 5% team discount is applied automatically.
Yes. Besides Johannesburg, Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course runs as classroom training in Pretoria and Cape Town. It also runs as live online training you can join from anywhere in South Africa, and in-house at your organisation's own premises.
Yes — Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course can be delivered at your offices in Johannesburg or at a venue you choose, on dates that suit your team, with case studies tailored to your sector. Message our training advisors to request a proposal.
By the end of the Planning and Implementation of Cybersecurity & Information Security (ISO 27001) programme, you'll be able to explain the clauses of iso/iec 27001 and how the management system cycle operates, define context, scope and information security objectives for an organisation, conduct an information security risk assessment and produce a risk treatment plan, and prepare a statement of applicability and select annex a controls with justification. The full breakdown of topics is covered session by session in the Course Outline tab above.
The programme is designed for professionals who plan, run or assess information security, including: Chief information security officers and security managers, IT managers and heads of infrastructure, Information security and risk officers, Compliance, privacy and data protection officers, Internal and IT auditors, Network, systems and cloud administrators, Project managers leading certification projects, and Consultants supporting ISMS implementation in banks, telecoms and public bodies.
Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course typically runs as 10 Days. It's available as in-person classroom, live virtual, and in-house corporate training — every course can also be delivered on-site for your team on dates that suit you.
Yes — delegates who meet the attendance requirement receive a Certificate of Completion for Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course from Vision Reach Global Consultancy, issued in the name you register with, so double-check the spelling at checkout.
Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course is pitched at intermediate professionals. If you're unsure whether it's the right fit for your current role or background, message our training advisors before you register and they'll help you confirm.
Related Training
More Computing and Information Technology Courses in South Africa
Data Analytics for Cybersecurity Training Course
Key Skills You'll Learn
- Understand core data analytics for cybersecurity principles and how they fit together in practice.
- Apply practical techniques for cybersecurity analytics in day-to-day implementation.
Vision Reach Global
From $3,000 · KSh 230,000
Cloud Computing and Infrastructure Management
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Cybersecurity and Network Defense Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
ICT Infrastructure Management Training
Key Skills You'll Learn
- Develop comprehensive expertise in the course subject area
- Apply practical skills in real-world scenarios
Vision Reach Global
From $3,000 · KSh 230,000
Also Training in Johannesburg
Other Courses Running in Johannesburg, South Africa
A-Z for Risk, Reliability and Safety Management Training
Key Skills You'll Learn
- Master core concepts and frameworks in a-z for risk, reliability and safety man
- Apply practical tools and methodologies to your own organizational context
Vision Reach Global
From $1,500 · KSh 115,000
Accounting for NGOs Using QuickBooks Training
Key Skills You'll Learn
- Master core accounting for ngos using quickbooks training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Accounts Payable and Operations Training Course
Key Skills You'll Learn
- Understand core accounts payable and operations principles and how they fit together in practice.
- Apply practical techniques for accounts payable and operations in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 110,000
Accounts Receivable Management and Development of Credit Policies Training
Key Skills You'll Learn
- Understand core accounts receivable management and development of credit policies principles and how they fit together in practice.
- Apply practical techniques for accounts receivable module 1 in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
Achievement of Gender Equity in Development Projects Training
Key Skills You'll Learn
- Master core achievement of gender equity in development projects training concepts and frameworks.
- Apply relevant tools and techniques in your organizational context.
Vision Reach Global
From $1,500 · KSh 115,000
Achieving Strategy through Leadership: Strategy and Innovation Training Course
Key Skills You'll Learn
- Understand core achieving strategy through leadership: strategy and innovation principles and how they fit together in practice.
- Apply practical techniques for managing strategic risks in day-to-day implementation.
Vision Reach Global
From $1,500 · KSh 115,000
What Our Clients Say
VRG brings strategic discipline to complex organizational challenges. Their approach is structured, data-driven, and outcome-focused.
Levis Wabwire
Managing Director
They facilitated our strategy review, we improved departmental KPI alignment by 35% and reduced operational bottlenecks significantly.
David Oketch
Strategy Lead
Employee engagement scores increased following the leadership training program. The difference in accountability culture is evident.
Wendy Albright
Program Manager
Looking for a different city or delivery format? See every date for Planning and Implementation of Cybersecurity & Information Security (ISO 27001) Training Course in South Africa or browse every course running in Johannesburg.